PostGREShell

PostGREShell: 12-year-old PostgreSQL logical replication flaw CVE-2026-6471 enables remote code execution

Security researchers disclose PostGREShell, a flaw present since PostgreSQL 9.4 that lets users with the REPLICATION attribute execute arbitrary code on database hosts.